TrustyAccess Start free trial

Trust

Is remote access safe?

It can be, when you decide who gets in and you see every connection. Here are the real risks, and how TrustyAccess handles each one.

The risks, one by one

Someone gets in who shouldn't.
Only people you add can log in, with two factor when you require it, and only to the computers you give them, at the hours you set.
A password leaks.
No one types or sees a computer's password, so there's none to leak. With two factor on, a stolen login password isn't enough on its own: the code stops it. Wrong tries lock the login, and a login from a new country is reported.
Someone leaves and keeps access.
Turn off their login and their access ends at once, on every computer. There's no shared password to change.
Connections no one knows about.
Every connection is on record, the person at the computer sees who is connecting, and you can be notified the moment it happens.
Someone does too much once connected.
Camera, sound and running commands are off until you turn them on. You choose what a connection can do on each computer.
Connections at odd hours.
Set office hours for each person, and the days, hours and internet addresses each computer accepts. Anything outside them is refused.
The software maker looks in.
We can't open your company unless you allow it, and every change to that switch is in your log.

Nothing connects without your OK

  • Only people you add can log in, and only to the computers you give them.
  • Their days, hours and addresses are checked every time they connect.
  • You can make the person at the computer accept each connection.
  • New computers can start switched off until a manager turns them on.
  • A master switch stops all access at once.

You see everything that happens

  • Every connection, file transfer, login and change is on record.
  • No one can edit the record, not even us.
  • The person at the computer sees who is connecting and from which company.
  • Notifications reach you by email or on your phone the moment something you care about happens.

A stolen password isn't enough

  • Computer passwords are created for you, locked away and never shown, so there's nothing to steal from a sticky note or a chat.
  • Logins have two factor, and you can require it for everyone.
  • Wrong passwords lock a login, and a login from a new country is reported. If someone gets a login email they didn't expect, one click on "It wasn't me" changes the password and logs them out everywhere.
  • Anyone who keeps guessing passwords to reach your computers is blocked.

What we can see, and what we can't

Our servers connect the two computers, check your rules each time, and keep the record: who connected to which computer, when, for how long and from where, and the names and sizes of the files sent. They never see what's on the screen, what's typed, or what's inside the files. All of that is scrambled on one computer and unscrambled only on the other.

  • We can't open your company or reach its computers unless you allow it. That switch and every change to it are in your log.
  • Your computers' passwords are locked under your company's key. While our access is turned off, we can't open them.
  • We don't sell data, we don't show ads, and we don't follow you around other sites.
Your computerScreen, keys, filesOffice computerScreen, keys, files

Encrypted end to end: only the two computers can read it.

Our servers keepwho, which computer, when, how long, from where, file names and sizes

Does my connection go through your servers?

Only when it has to. The two computers connect directly whenever they can. When a firewall is in the way, the connection goes through our servers in Germany, still encrypted end to end, so we can't read it either.

Most networks need nothing changed. A network that lets out only web traffic needs these opened for outgoing connections: TCP ports 21115 to 21117 and UDP port 21116.

Who else handles data

Hetzner
In Germany: the servers TrustyAccess runs on.
Amazon Web Services
Sending the emails TrustyAccess sends.
DreamHost
Our mailboxes, where your messages to us arrive.
Paddle
Payments, invoices and refunds, as our reseller.

We'll update this list before we add anyone new.

Where your data lives

  • On our servers in Germany.
  • Kept only as long as your plan and your settings say, then deleted.
  • When you close your account, your data is deleted after the period our Terms state. Ask us and we'll delete it sooner.
  • We give data to an authority only when the law requires it, and we refuse any request from outside the EU that EU law doesn't allow.

If someone misuses TrustyAccess

TrustyAccess is for companies reaching their own computers. If someone used it to reach a computer without permission, tell us and we'll act on it.